npm · npm:zxcvbn

zxcvbn active

realistic password strength estimation

The latest stable version of zxcvbn is 4.4.2, published on 2017-02-07. Verified by Vigia on 2026-11-12.

Latest stable version	4.4.2
Published	2017-02-07 03:58:00 UTC
Install	`npm install zxcvbn@latest`
Requires (engines)	none declared
Peer dependencies	—
Dist-tags	`latest: 4.4.2`
License	MIT
Advisories on latest version	none known
Last verified	2026-11-12 12:25:27 UTC
Sources	api.deps.dev, registry.npmjs.org, registry.npmjs.org

Ask your AI assistant to check this

AI models are trained up to a date, so they can be wrong about versions, deprecations and vulnerabilities. Paste this into Claude, ChatGPT, Perplexity or Cursor and it will answer with the verified data on this page:

Before answering about the npm package "zxcvbn", check Vigia (verified, dated facts): https://vigia.coredls.cloud/v1/packages/npm/zxcvbn . For my whole project use https://vigia.coredls.cloud/context

Check my whole package.json

Using an AI coding agent every day? Connect Vigia once and it checks this by itself.

Maintenance

Activity	dormant
Last stable release	2017-02-07 03:58:00 UTC · 3566 days ago
Stable releases in the last 12 months	0
Published versions	23

Heuristic based only on release dates; it does not measure issue or security response times.

Version history

Version	Published
`4.4.2`	2017-02-07 03:58:00 UTC
`4.4.1`	2016-10-31 22:00:41 UTC
`4.4.0`	2016-09-24 23:55:01 UTC
`4.3.0`	2016-05-04 02:26:38 UTC
`4.2.0`	2015-11-20 21:54:26 UTC
`4.1.1`	2015-10-30 18:52:30 UTC
`4.1.0`	2015-10-29 23:51:27 UTC
`4.0.1`	2015-10-24 05:50:38 UTC
`3.5.0`	2015-09-24 20:19:52 UTC
`3.4.0`	2015-09-09 23:05:33 UTC
`3.3.1`	2015-09-06 08:37:45 UTC
`3.3.0`	2015-09-05 05:59:04 UTC
`3.2.2`	2015-08-23 02:57:25 UTC
`3.2.1`	2015-08-23 02:38:36 UTC
`3.2.0`	2015-08-13 00:55:33 UTC
`3.1.0`	2015-08-10 03:12:01 UTC
`3.0.2`	2015-08-08 22:05:31 UTC
`3.0.1`	2015-08-08 01:39:41 UTC
`3.0.0`	2015-08-08 01:09:17 UTC
`2.0.2`	2015-07-24 00:57:42 UTC

Showing the 20 most recent of 23 versions. JSON

Give your AI agent these facts

Vigia is a free MCP server: your coding agent checks versions, breaking changes and vulnerabilities before it writes code. No signup, no API key.

claude mcp add --transport http vigia https://vigia.coredls.cloud/mcp

Add to Cursor Add to VS Code ★ Star on GitHub

Any other MCP client

{ "mcpServers": { "vigia": { "url": "https://vigia.coredls.cloud/mcp" } } }

Agent skill (SKILL.md): tells the agent when to use Vigia · GitHub Action for pull requests

Frequently asked questions

What is the latest version of zxcvbn?

The latest stable version of zxcvbn is 4.4.2, published on 2017-02-07. Verified by Vigia on 2026-11-12.

How do I install the latest version of zxcvbn?

Run npm install zxcvbn@latest. The latest stable version is 4.4.2 (verified 2026-11-12).

Is zxcvbn deprecated?

No. zxcvbn is not marked as deprecated in the registry.

Which Node.js version does zxcvbn require?

zxcvbn 4.4.2 does not declare a Node.js version requirement.

Does zxcvbn 4.4.2 have known vulnerabilities?

No known advisories affect zxcvbn 4.4.2 according to the data Vigia checks.

Is zxcvbn still maintained?

zxcvbn published 0 stable releases in the last 12 months; the most recent was 3566 days ago. Activity: dormant.

Observed changes

No changes observed yet since Vigia started tracking this package.

Related packages

Badges for your README

Show the latest version, maintenance status and deprecation status of this package. Copy the Markdown:

[![version](https://vigia.coredls.cloud/badge/npm/zxcvbn/version.svg)](https://vigia.coredls.cloud/npm/zxcvbn)
[![maintained](https://vigia.coredls.cloud/badge/npm/zxcvbn/maintained.svg)](https://vigia.coredls.cloud/npm/zxcvbn)
[![status](https://vigia.coredls.cloud/badge/npm/zxcvbn/status.svg)](https://vigia.coredls.cloud/npm/zxcvbn)

For agents

GET https://vigia.coredls.cloud/v1/packages/npm/zxcvbn
GET https://vigia.coredls.cloud/v1/packages/npm/zxcvbn/versions/{version}